GDPR Consultancy Pricing: Fixed Fees, No Surprises

Because a scoped piece of GDPR work carries a knowable cost, and holding the figure back tends to suit the seller more than the buyer. This is the one corner of the data protection market where organisations actively search on price, yet no competitor puts a figure in writing. Listing indicative prices is our answer to that, in keeping with the open pricing CyPro applies right across its specialist services. It lets you plan and compare before you speak to anyone, and your engagement is still confirmed at scoping.

Each figure is an indicative starting point rather than a firm quote. For the gap analysis, what sets the final figure is the size of your organisation and the complexity of your data: how much personal data you hold, how many systems and third parties it moves through, and how sensitive it is. For the managed services it is volume, meaning how many assessments or requests you actually get, agreed at scoping and reviewed as it changes. Where the scope is clear we hold the work to a fixed fee rather than an open day rate, which is the whole point of publishing them.

CyPro's own data protection consultants, in-house, from the scoping call to the final report. The work is not subcontracted to a delivery partner, so you deal with one team throughout and the people who scope the project are the people who run it. The same consultants deliver the gap analyses, the DPIA and data subject rights services and the fractional DPO work.

A gap analysis shows where you stand against the UK GDPR and produces a costed plan, and it is where most organisations start. The DPIA managed service suits you if new projects keep raising assessments and nobody has time to write them. The data subject rights service suits you if requests arrive faster than your team can answer them inside the statutory month. A fractional DPO suits you if the questions are constant rather than project-shaped and you are not ready to hire. The scoping call confirms what you actually need.

See how a project runs →

A gap analysis gives you an independent view and a prioritised, costed remediation plan; acting on it can sit with your team, or you can bring us in to do the remediation. Where you want the remediation and a re-check folded into one piece of work, we scope that from the gap analysis findings. The consultant day rate covers ad-hoc support that does not fit a defined project. None of the fixed fees above conceals a standing retainer, and the managed services are month by month against an agreed scope.